bnc#828623 - bnc#839596 - VUL-0: CVE-2013-1442: XSA-62: xen: Information leak on AVX and/or LWP capable CPUs 5242a1b5-x86-xsave-initialize-extended-register-state-when-guests-enable-it.patch - bnc#840592 - VUL-0: CVE-2013-4355: XSA-63: xen: Information leaks through I/O instruction emulation CVE-2013-4355-xsa63.patch - bnc#840593 - VUL-0: CVE-2013-4356: XSA-64: xen: Memory accessible by 64-bit PV guests under live migration CVE-2013-4356-xsa64.patch - bnc#841766 - VUL-1: CVE-2013-4361: XSA-66: xen: Information leak through fbld instruction emulation CVE-2013-4361-xsa66.patch - bnc#833796 - L3: Xen: migration broken from xsave-capable to xsave-incapable host 52205e27-x86-xsave-initialization-improvements.patch 522dc0e6-x86-xsave-fix-migration-from-xsave-capable-to-xsave-incapable-host.patch - bnc#839600 - [HP BCS SLES11 Bug]: In HP’s UEFI x86_64 platform and sles11sp3 with xen environment, xen hypervisor will panic on multiple blades nPar. 523172d5-x86-fix-memory-cut-off-when-using-PFN-compression.patch - bnc#833251 - [HP BCS SLES11 Bug]: In HP’s UEFI x86_64 platform and with xen environment, in booting stage ,xen hypervisor will panic. 522d896b-x86-EFI-properly-handle-run-time-memory-regions-outside-the-1-1-map.patch - bnc#834751 - [HP BCS SLES11 Bug]: In xen, “shutdown –y 0 –h” cannot power off system 522d896b-x86-EFI-properly-handle-run-time-memory-regions-outside-the-1-1-map.patch OBS-URL: https://build.opensuse.org/package/show/Virtualization/xen?expand=0&rev=274
42 lines
1.3 KiB
Diff
42 lines
1.3 KiB
Diff
# Commit 546ba2f17008387cf9821df46e6dac04f0883a9b
|
|
# Date 2013-09-10 17:16:02 +0200
|
|
# Author Matthew Daley <mattjd@gmail.com>
|
|
# Committer Jan Beulich <jbeulich@suse.com>
|
|
sched/arinc653: check for guest data transfer failures
|
|
|
|
Coverity-ID: 1055121
|
|
Coverity-ID: 1055122
|
|
Coverity-ID: 1055123
|
|
Coverity-ID: 1055124
|
|
Signed-off-by: Matthew Daley <mattjd@gmail.com>
|
|
Reviewed-by: Andrew Cooper <andrew.cooper3@citrix.com>
|
|
Acked-by: George Dunlap <george.dunlap@eu.citrix.com>
|
|
Acked-by: Keir Fraser <keir@xen.org>
|
|
|
|
--- a/xen/common/sched_arinc653.c
|
|
+++ b/xen/common/sched_arinc653.c
|
|
@@ -635,12 +635,21 @@ a653sched_adjust_global(const struct sch
|
|
switch ( sc->cmd )
|
|
{
|
|
case XEN_SYSCTL_SCHEDOP_putinfo:
|
|
- copy_from_guest(&local_sched, sc->u.sched_arinc653.schedule, 1);
|
|
+ if ( copy_from_guest(&local_sched, sc->u.sched_arinc653.schedule, 1) )
|
|
+ {
|
|
+ rc = -EFAULT;
|
|
+ break;
|
|
+ }
|
|
+
|
|
rc = arinc653_sched_set(ops, &local_sched);
|
|
break;
|
|
case XEN_SYSCTL_SCHEDOP_getinfo:
|
|
rc = arinc653_sched_get(ops, &local_sched);
|
|
- copy_to_guest(sc->u.sched_arinc653.schedule, &local_sched, 1);
|
|
+ if ( rc )
|
|
+ break;
|
|
+
|
|
+ if ( copy_to_guest(sc->u.sched_arinc653.schedule, &local_sched, 1) )
|
|
+ rc = -EFAULT;
|
|
break;
|
|
}
|
|
|